Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: jz3JskCdGI61fmSSNlNafrmWRPArrRShw7Q+kAzxFWk=
Subject key identifier: E3:CE:55:9E:D2:30:8A:B2:8D:6C:16:BB:7F:B4:10:DB:7B:69:C1:81
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 0199FCFD27EA79F8B8DF04BDD2E124EC516A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 153A
Signing time: Sun 19 Oct 2025 15:01:13 +0000
Manifest this update: Sun 19 Oct 2025 15:01:13 +0000
Manifest next update: Mon 20 Oct 2025 15:01:13 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: IlBgyS47Wm5u4lh8ZSPZxtHzUOUekAbFWyqqlJyp5dY=)
2: JysSz_R1K3TNaznJ02DbQNBve_s.roa (hash: BaOSaAFh8MSaQI0AxI9H+YSRs1439Nfg5CR//S5kRHM=)
3: cPSt1cBK1yUkGNEnPd-jB0H0f98.roa (hash: 6XTiW18fxhFDL+0aNweHaTDamcOXmMJdNCPIYbjuHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:27:ea:79:f8:b8:df:04:bd:d2:e1:24:ec:51:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Oct 19 15:01:13 2025 GMT
Not After : Oct 20 15:01:13 2025 GMT
Subject: CN=e3ce559ed2308ab28d6c16bb7fb410db7b69c181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:a9:9a:03:2d:64:46:09:0b:97:52:44:90:
25:b8:27:46:83:69:1b:05:d9:e5:e7:71:65:73:18:
d3:51:f8:94:2a:d9:1b:7f:9f:74:20:fa:03:a6:9a:
28:f6:a5:bd:bc:d7:17:8e:a1:1f:ae:dd:4b:ee:07:
f9:8a:e8:b2:70:d0:0e:a7:a3:08:72:ed:e6:ad:34:
48:89:65:a2:1e:be:5b:5b:9e:28:26:30:10:37:15:
73:d7:f1:07:d7:a6:fd:06:4d:86:53:f0:68:0b:f5:
41:7c:3b:ea:94:09:51:74:bc:51:98:f0:3e:35:6a:
45:09:e8:12:4e:0b:7c:af:2b:8d:bd:2e:23:ae:36:
d8:ae:98:46:1f:c5:52:14:aa:76:06:d1:d5:eb:f6:
92:74:3a:e4:ef:4e:42:0c:ac:0d:ef:94:b3:4e:14:
49:4e:de:3b:7b:11:46:b8:84:be:90:e1:6d:b4:78:
04:53:e5:2d:33:15:39:16:88:45:85:c8:cd:73:8e:
b6:f5:10:e2:a4:ea:4f:ab:52:b2:87:ca:d7:5a:fd:
4e:0d:8c:23:70:71:6f:c9:e1:2c:55:e0:53:67:0d:
26:a2:fe:33:ce:c8:98:e6:2c:b9:f6:59:ae:61:eb:
d7:ed:35:44:1f:bc:3b:60:ae:06:02:cb:1d:45:9c:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CE:55:9E:D2:30:8A:B2:8D:6C:16:BB:7F:B4:10:DB:7B:69:C1:81
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:2f:dd:fa:65:f9:53:c2:36:59:51:4b:ce:fe:52:31:8a:
4a:09:c8:72:b1:3e:57:1d:8f:30:46:99:e1:a4:89:d4:68:87:
17:33:f4:e4:30:b4:d0:78:5e:20:4d:3e:7c:dd:86:b9:a7:5f:
f5:93:e4:4b:f4:61:d4:89:df:e3:02:5f:87:95:ae:f0:94:b6:
98:96:f9:5d:1b:a7:b6:21:f6:9a:8b:5a:6f:b0:2f:09:a4:8a:
b7:e7:db:89:45:de:6f:99:61:5e:3b:3f:b2:0d:67:7f:67:0e:
9e:57:a9:88:e0:9d:7b:34:3d:c4:b5:1a:2c:a5:04:56:85:11:
6c:99:65:78:fb:af:84:8d:dc:0d:88:26:b9:d2:fa:07:89:86:
08:0d:06:b1:c4:3a:55:4e:6c:bb:c1:be:49:a1:60:1a:b8:6f:
e9:a0:40:4e:f8:24:16:b5:e0:4e:d2:4d:dc:bc:c4:aa:b2:bf:
48:3d:b2:16:e9:3e:2f:20:5b:c0:f9:d2:12:79:1a:9e:19:47:
ec:1e:74:a1:d2:14:be:87:e4:8a:87:74:2c:5e:76:56:61:21:
11:de:fb:7e:fb:51:a7:a9:a5:77:e4:5e:f9:0d:e2:29:ed:ca:
01:5a:e7:21:34:59:21:c0:5b:e7:b9:38:2c:52:09:37:8f:a0:
18:ca:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:40 2025 by rpki-client